Work Schedules and Constructive Feedback in Internal Audit Operations (CIA Part 3)
Overview
Work Schedules and Constructive Feedback is part of the Internal Audit Operations domain of CIA Part 3 (Business Knowledge for Internal Auditing). It deals with how the Chief Audit Executive (CAE) and audit managers organise, schedule, supervise and develop internal audit staff so that the annual audit plan is delivered with quality, on time and within budget. It also covers how auditors are developed through ongoing, constructive performance feedback. It connects closely to the IIA Global Internal Audit Standards, which cover managing resources, human resources, engagement supervision and quality.
Why It Is Important
1. Delivering the audit plan: A risk-based internal audit plan has no value if it cannot be done. Work schedules turn the plan into actual staff assignments, timelines and budgets.
2. Using resources well: Internal audit functions usually have limited staff and budget. Good scheduling matches auditors' skills to engagement needs. It also limits idle time and avoids overloading key people.
3. Independence and objectivity: Schedules should not assign auditors to areas where they recently worked or where they have conflicts of interest. The Standards generally treat auditing an operation you were responsible for within the previous year as an impairment.
4. Staff development and retention: Constructive feedback builds competence and motivation. This supports the requirement that internal auditors collectively have the knowledge, skills and competencies they need.
5. Quality assurance: Supervision and feedback are part of ongoing monitoring within the Quality Assurance and Improvement Program (QAIP).
6. Credibility with stakeholders: Meeting deadlines builds trust with senior management and the board. Missing them erodes it.
What It Is
Work schedules are the plans that allocate internal audit staff and time to specific engagements and activities over a period, such as annually, quarterly or weekly. They include:
- The engagements to be done, and when (start and end dates)
- Staff assigned to each engagement, matched by skill, experience and independence
- Budgeted hours per engagement and per phase (planning, fieldwork, reporting, follow-up)
- Non-audit time: training, vacation, holidays, administration, special projects
- Contingency time for unplanned consulting requests, fraud investigations or emerging risks
- Milestones and key deadlines, such as audit committee meetings
Constructive feedback is ongoing, specific, objective and timely communication about an auditor's performance. Its purpose is to reinforce effective behaviour and improve areas of weakness. It includes:
- Real-time coaching during engagements by supervisors
- Review notes on workpapers
- Post-engagement performance evaluations
- Periodic (for example, annual) performance appraisals tied to competency frameworks
- Development plans, training recommendations and career pathing
How It Works
A. Building work schedules
Step 1: Start from the risk-based audit plan. The CAE sets priorities from the risk assessment. Higher-risk engagements get priority and usually earlier scheduling.
Step 2: Work out available hours. Total available hours equal staff count times standard hours, minus vacation, holidays, training (CPE) and administrative time.
Step 3: Estimate engagement budgets. Base these on prior-year actuals, scope, complexity, location, entity size and auditee readiness.
Step 4: Match staff to engagements. Consider competencies (IT, fraud, data analytics, industry knowledge), experience, independence, workload balance and development goals. Pairing junior with senior staff supports on-the-job training.
Step 5: Coordinate with auditees and others. Avoid busy periods such as year-end close. Coordinate with external auditors and other assurance providers to reduce duplication.
Step 6: Include flexibility. Set aside contingency hours, often around 10 to 20 percent, for unplanned requests.
Step 7: Monitor and adjust. Compare actual hours to budget using time reporting. Investigate significant variances. Communicate significant plan changes to senior management and the board.
Common scheduling tools:
- Gantt charts: bar charts showing engagements and staff assignments over time. Simple and visual, but they do not clearly show dependencies.
- PERT (Program Evaluation and Review Technique): network diagrams that use optimistic, most likely and pessimistic time estimates. The expected time is (O + 4M + P) / 6.
- Critical Path Method (CPM): identifies the longest sequence of dependent activities. Delays on the critical path delay the whole project. Activities off the critical path have slack.
- Audit management software: handles resource allocation, time tracking and dashboards.
- Budget-versus-actual reports: used for variance analysis.
B. Giving constructive feedback
Key characteristics:
- Timely: given close to the event, not saved for the annual review.
- Specific: describes particular behaviours or work products, not vague generalities.
- Objective and behaviour-focused: addresses actions and results, not personality.
- Balanced: recognises strengths as well as areas to improve.
- Actionable: includes clear steps or expectations for improvement.
- Two-way: invites the auditor's view and self-assessment.
- Private for criticism: correct in private. Recognition can be public.
- Documented: especially for formal evaluations, to support fairness and development tracking.
Common models:
- SBI (Situation-Behaviour-Impact): describe the situation, the observed behaviour and its impact.
- Feedback sandwich: positive, improvement, positive. It is widely known but criticised because it can dilute the message.
- Coaching conversations: guided questioning that helps auditors find their own solutions.
- 360-degree feedback: input from supervisors, peers, subordinates and sometimes auditees.
Where feedback fits in the engagement cycle:
- Planning: supervisors approve the work program and explain expectations.
- Fieldwork: ongoing coaching, plus workpaper review notes that must be cleared.
- Reporting: feedback on writing quality and on how observations are communicated.
- Post-engagement: a formal performance evaluation for each staff member, often required by internal audit policy. Auditee satisfaction surveys can also be used.
- Annually: a consolidated appraisal linked to goals, competency frameworks (such as the IIA Competency Framework), training needs and promotion decisions.
Links to supervision and QAIP:
- Engagement supervision makes sure objectives are achieved, quality is assured and staff develop.
- How much supervision is needed depends on staff proficiency and experience and on engagement complexity.
- Evidence of supervision, such as review notes, sign-offs and evaluations, must be documented and kept.
- Results of feedback and evaluations feed into training plans and the internal audit function's overall competency gap analysis.
How to Answer Exam Questions on This Topic
CIA Part 3 questions are multiple choice and usually scenario-based. Expect these types:
1. Scenario questions on staff assignment: for example, which auditor should be assigned to an engagement. Rule out anyone with an independence impairment, such as recently working in the area, having a family relationship or having prior responsibility. Then choose the one with the right competencies. If no one qualifies, consider a co-source arrangement or outsourcing.
2. Questions on schedule variances: for example, an engagement is running significantly over budget. The best response is usually to investigate the cause, communicate with the supervisor or CAE and adjust the plan. Cutting scope without approval or sacrificing quality is wrong.
3. Scheduling tool questions: know when to use Gantt charts (simple timelines), PERT (uncertain time estimates) and CPM (dependencies and the critical path). Be ready to calculate PERT expected time or identify the critical path.
4. Feedback best-practice questions: choose the answer that is timely, specific, behaviour-focused, private (for criticism), documented and development-oriented.
5. Capacity questions: calculate available audit hours after deducting non-audit time, and decide whether the plan is feasible.
6. Questions on resource shortfalls: the CAE should tell senior management and the board about the impact of resource limits on the plan and on risk coverage.
Exam Tips: Answering Questions on Work Schedules and Constructive Feedback
Tip 1: Anchor everything to the risk-based plan. When unsure about scheduling priority, the highest-risk engagements come first. Answers based on convenience or auditor preference are usually wrong.
Tip 2: Independence beats availability. An available auditor with a conflict of interest is never the best choice. Look for keywords such as recently transferred from, previously managed, or related to.
Tip 3: Competence comes next. Match specialised engagements, such as IT, fraud or derivatives, with qualified staff or external specialists. Assigning juniors without supervision to complex work is a trap.
Tip 4: Watch for communication requirements. Significant changes to the audit plan or resource needs go to senior management and the board. Any answer that skips the board on significant matters is suspect.
Tip 5: Never sacrifice quality to meet a deadline. If time is tight, options include extending the deadline, adding resources or formally revising scope with approval. Skipping procedures quietly is never correct.
Tip 6: Remember non-audit time. In capacity calculations, subtract vacation, holidays, training, administration and sick time before allocating hours to engagements.
Tip 7: Know the PERT formula. Expected time = (Optimistic + 4 x Most Likely + Pessimistic) / 6. For CPM, the critical path is the longest path through the network, with zero slack.
Tip 8: Good feedback has a recognisable profile. The correct answer is usually the one that is timely, specific, objective, balanced and actionable. Distractors often describe delayed feedback (waiting for the annual review), vague praise or personal criticism, or public reprimands.
Tip 9: Supervision depends on proficiency. Less experienced staff need closer supervision. Supervisory review must be documented in the workpapers.
Tip 10: Link feedback to development. The purpose of feedback is improvement and growth, not punishment. Answers that connect evaluations to training plans and competency gaps are usually strongest.
Tip 11: Read for the word BEST or MOST appropriate. Several options may be partly right. Pick the most comprehensive, Standards-aligned, proactive option.
Tip 12: Think like a CAE. Choose answers that balance coverage, quality, independence, staff development and stakeholder communication.
Quick Example
Question: An audit senior consistently misses fieldwork deadlines. What is the most appropriate action by the audit manager?
A) Note it in the annual appraisal only
B) Reassign all of the senior's work to others
C) Meet privately and promptly to discuss specific instances, understand causes and agree on an improvement plan
D) Raise the issue at the team meeting so everyone learns
Answer: C. The feedback is timely, private, specific, two-way and actionable.
Summary
Work schedules turn the risk-based audit plan into realistic, independent and competence-matched staff assignments, using tools such as Gantt charts, PERT and CPM, with ongoing budget-versus-actual monitoring. Constructive feedback, delivered through supervision, review notes, engagement evaluations and annual appraisals, develops auditors and supports quality under the QAIP. On the exam, put risk first, put independence and competence before convenience, never compromise quality, communicate significant issues to senior management and the board, and choose feedback that is timely, specific, objective and development-focused.
